必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Jakarta

省份(region): Jakarta

国家(country): Indonesia

运营商(isp): Esia

主机名(hostname): unknown

机构(organization): PT Telekomunikasi Indonesia

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
125.161.138.219 attackspam
Unauthorized connection attempt from IP address 125.161.138.219 on Port 445(SMB)
2020-08-19 20:28:25
125.161.138.123 attackspambots
Unauthorized connection attempt from IP address 125.161.138.123 on Port 445(SMB)
2020-07-25 02:26:04
125.161.138.239 attackspam
Unauthorized connection attempt from IP address 125.161.138.239 on Port 445(SMB)
2020-04-01 19:57:24
125.161.138.184 attackbotsspam
20/2/2@23:54:59: FAIL: Alarm-Network address from=125.161.138.184
20/2/2@23:54:59: FAIL: Alarm-Network address from=125.161.138.184
...
2020-02-03 13:17:28
125.161.138.24 attackbotsspam
Honeypot attack, port: 445, PTR: 24.subnet125-161-138.speedy.telkom.net.id.
2020-01-28 19:07:37
125.161.138.47 attack
unauthorized connection attempt
2020-01-22 20:42:58
125.161.138.4 attackspam
Unauthorised access (Dec 26) SRC=125.161.138.4 LEN=52 TTL=117 ID=19472 DF TCP DPT=445 WINDOW=8192 SYN
2019-12-26 18:35:13
125.161.138.86 attackspambots
1576909573 - 12/21/2019 07:26:13 Host: 125.161.138.86/125.161.138.86 Port: 445 TCP Blocked
2019-12-21 18:38:20
125.161.138.119 attackbotsspam
$f2bV_matches
2019-11-28 17:23:16
125.161.138.50 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 19-09-2019 11:51:21.
2019-09-20 00:16:07
125.161.138.50 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 03:01:12,439 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.138.50)
2019-07-22 15:33:37
125.161.138.190 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:48:30,794 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.161.138.190)
2019-07-19 05:03:44
125.161.138.188 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 09:04:06,699 INFO [shellcode_manager] (125.161.138.188) no match, writing hexdump (4d0d6cea53e8cad65547464990b8562c :2116803) - MS17010 (EternalBlue)
2019-07-04 19:56:54
125.161.138.102 attackbots
Jun 24 12:59:26 *** sshd[22400]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 12:59:26 *** sshd[22400]: Invalid user 2 from 125.161.138.102
Jun 24 12:59:26 *** sshd[22400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102
Jun 24 12:59:28 *** sshd[22400]: Failed password for invalid user 2 from 125.161.138.102 port 42626 ssh2
Jun 24 12:59:28 *** sshd[22400]: Received disconnect from 125.161.138.102: 11: Bye Bye [preauth]
Jun 24 13:03:57 *** sshd[22481]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 13:03:57 *** sshd[22481]: Invalid user terraria from 125.161.138.102
Jun 24 13:03:57 *** sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102


........
------------------------------------------
2019-06-27 11:03:33
125.161.138.102 attackbotsspam
Jun 24 12:59:26 *** sshd[22400]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 12:59:26 *** sshd[22400]: Invalid user 2 from 125.161.138.102
Jun 24 12:59:26 *** sshd[22400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102
Jun 24 12:59:28 *** sshd[22400]: Failed password for invalid user 2 from 125.161.138.102 port 42626 ssh2
Jun 24 12:59:28 *** sshd[22400]: Received disconnect from 125.161.138.102: 11: Bye Bye [preauth]
Jun 24 13:03:57 *** sshd[22481]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 13:03:57 *** sshd[22481]: Invalid user terraria from 125.161.138.102
Jun 24 13:03:57 *** sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102


........
------------------------------------------
2019-06-26 01:52:15
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.161.138.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15723
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.161.138.201.		IN	A

;; AUTHORITY SECTION:
.			3380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041700 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 17 23:21:32 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:
201.138.161.125.in-addr.arpa domain name pointer 201.subnet125-161-138.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
201.138.161.125.in-addr.arpa	name = 201.subnet125-161-138.speedy.telkom.net.id.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
121.58.212.108 attackspam
2020-08-09T10:00:05.265435correo.[domain] sshd[35828]: Failed password for root from 121.58.212.108 port 56655 ssh2 2020-08-09T10:01:05.846286correo.[domain] sshd[36076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.58.212.108 user=root 2020-08-09T10:01:08.041564correo.[domain] sshd[36076]: Failed password for root from 121.58.212.108 port 33531 ssh2 ...
2020-08-10 07:09:03
49.234.68.36 attackbotsspam
Aug 10 00:09:45 vm0 sshd[2396]: Failed password for root from 49.234.68.36 port 54480 ssh2
...
2020-08-10 07:01:46
2a02:2f0e:db08:9200:96d:1c6f:d867:e909 attackbots
Wordpress attack
2020-08-10 06:49:26
61.177.172.142 attack
Aug 10 00:50:12 piServer sshd[21293]: Failed password for root from 61.177.172.142 port 25170 ssh2
Aug 10 00:50:17 piServer sshd[21293]: Failed password for root from 61.177.172.142 port 25170 ssh2
Aug 10 00:50:21 piServer sshd[21293]: Failed password for root from 61.177.172.142 port 25170 ssh2
Aug 10 00:50:25 piServer sshd[21293]: Failed password for root from 61.177.172.142 port 25170 ssh2
...
2020-08-10 06:50:59
2a02:7b40:b0df:8e79::1 attack
xmlrpc attack
2020-08-10 06:38:38
223.65.203.130 attackbotsspam
17906:Aug  6 23:08:54 fmk sshd[31584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.65.203.130  user=r.r
17907:Aug  6 23:08:56 fmk sshd[31584]: Failed password for r.r from 223.65.203.130 port 41366 ssh2
17908:Aug  6 23:08:57 fmk sshd[31584]: Received disconnect from 223.65.203.130 port 41366:11: Bye Bye [preauth]
17909:Aug  6 23:08:57 fmk sshd[31584]: Disconnected from authenticating user r.r 223.65.203.130 port 41366 [preauth]
17928:Aug  6 23:19:15 fmk sshd[31745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.65.203.130  user=r.r
17929:Aug  6 23:19:18 fmk sshd[31745]: Failed password for r.r from 223.65.203.130 port 58918 ssh2
17930:Aug  6 23:19:20 fmk sshd[31745]: Received disconnect from 223.65.203.130 port 58918:11: Bye Bye [preauth]
17931:Aug  6 23:19:20 fmk sshd[31745]: Disconnected from authenticating user r.r 223.65.203.130 port 58918 [preauth]
17936:Aug  6 23:23:08 fmk........
------------------------------
2020-08-10 06:43:06
1.226.12.132 attackspambots
Aug 10 00:10:10 pve1 sshd[9558]: Failed password for root from 1.226.12.132 port 37440 ssh2
...
2020-08-10 06:57:48
87.246.7.36 attackspambots
Aug 10 00:50:08 relay postfix/smtpd\[12604\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 10 00:50:30 relay postfix/smtpd\[13550\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 10 00:50:36 relay postfix/smtpd\[12604\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 10 00:50:46 relay postfix/smtpd\[11416\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 10 00:51:08 relay postfix/smtpd\[12604\]: warning: unknown\[87.246.7.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-10 07:07:34
110.43.42.91 attackspambots
2020-08-10T01:54:47.364653mail.standpoint.com.ua sshd[18193]: Invalid user com!@# from 110.43.42.91 port 41108
2020-08-10T01:54:47.367181mail.standpoint.com.ua sshd[18193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.43.42.91
2020-08-10T01:54:47.364653mail.standpoint.com.ua sshd[18193]: Invalid user com!@# from 110.43.42.91 port 41108
2020-08-10T01:54:49.263436mail.standpoint.com.ua sshd[18193]: Failed password for invalid user com!@# from 110.43.42.91 port 41108 ssh2
2020-08-10T01:57:52.842888mail.standpoint.com.ua sshd[18614]: Invalid user Qwert1!@ from 110.43.42.91 port 3088
...
2020-08-10 07:09:22
178.128.37.146 attackspambots
Lines containing failures of 178.128.37.146
Aug  8 08:19:55 newdogma sshd[27733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.37.146  user=r.r
Aug  8 08:19:56 newdogma sshd[27733]: Failed password for r.r from 178.128.37.146 port 46954 ssh2
Aug  8 08:19:57 newdogma sshd[27733]: Received disconnect from 178.128.37.146 port 46954:11: Bye Bye [preauth]
Aug  8 08:19:57 newdogma sshd[27733]: Disconnected from authenticating user r.r 178.128.37.146 port 46954 [preauth]
Aug  8 08:35:06 newdogma sshd[28427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.37.146  user=r.r
Aug  8 08:35:08 newdogma sshd[28427]: Failed password for r.r from 178.128.37.146 port 46700 ssh2
Aug  8 08:35:09 newdogma sshd[28427]: Received disconnect from 178.128.37.146 port 46700:11: Bye Bye [preauth]
Aug  8 08:35:09 newdogma sshd[28427]: Disconnected from authenticating user r.r 178.128.37.146 port 46700........
------------------------------
2020-08-10 07:04:29
179.217.33.43 attackbots
Aug  3 17:11:05 mail1 sshd[31269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.217.33.43  user=r.r
Aug  3 17:11:06 mail1 sshd[31269]: Failed password for r.r from 179.217.33.43 port 38768 ssh2
Aug  3 17:11:06 mail1 sshd[31269]: Received disconnect from 179.217.33.43 port 38768:11: Bye Bye [preauth]
Aug  3 17:11:06 mail1 sshd[31269]: Disconnected from 179.217.33.43 port 38768 [preauth]
Aug  3 17:17:21 mail1 sshd[31787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.217.33.43  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=179.217.33.43
2020-08-10 06:47:09
162.247.74.200 attackspam
Aug  9 22:23:15 buvik sshd[13565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.200
Aug  9 22:23:17 buvik sshd[13565]: Failed password for invalid user admin from 162.247.74.200 port 40984 ssh2
Aug  9 22:23:18 buvik sshd[13569]: Invalid user admin from 162.247.74.200
...
2020-08-10 07:15:43
189.114.84.138 attackspambots
Opportunities to relax more often!
2020-08-10 06:56:26
68.183.86.99 attackbotsspam
until 2020-08-09T12:15:25+01:00, observations: 3, bad account names: 0
2020-08-10 07:14:55
60.249.82.121 attack
Aug  9 23:05:12 haigwepa sshd[19873]: Failed password for root from 60.249.82.121 port 46046 ssh2
...
2020-08-10 06:53:54

最近上报的IP列表

128.74.60.57 27.72.147.36 3.213.227.88 51.83.94.103
34.85.84.6 116.6.100.106 85.93.20.26 95.218.171.229
177.91.64.194 109.74.73.203 72.27.208.228 114.38.36.4
197.210.55.193 194.61.24.245 188.163.12.236 103.85.15.42
78.203.68.178 2.181.171.88 49.49.6.216 45.116.233.57